CVE-2012-1150

Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash…

published October 5, 2012

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05060 · 92.2th percentile
Published
2012-10-05T21:00Z
EPSS history
Timeline
  • 05 OCT 21:00Z
    Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash…
    cvelistv5